Comparing hashes (MD5 or SHA1) will definitely tell you whether two
files are identical, but it won't tell you what the differences are.
However, you could write a script that processes the output of "jar -tv"
or "unzip -lv" and spits out the differences. The latter tool ("unzip"
from www.info-zip.org) is nice because the output contains a checksum
per file, which is a more reliable indicator of differences compared to
using file sizes or timestamps.On 12/14/2007 12:02 PM, Rémy Sanlaville wrote: > Hi, > > I would like to make sure that my project build is reproducible. > For instance, I want to be sure that I can package again a tagged version. > > So I am looking for a tools that can compare two package (two jar, two war, > two ear...) and eventually shows the potential differences. > Do you know if a such tools exists ? > > In order two verify if two package are identical, I was thinking of > generating and comparing the corresponding checksum (md5 or sha1) . > Do you think that it would be good enough ? > > Rémy > >
